Configuring Scan Scheduling
You can schedule a time to perform a malware scan for a plan. To do that:
- Navigate to Recovery Plans.
- Select the plan that you want to scan for malware.
- From the Manage menu, select Schedule.
OR-
Right-click the plan name and select Manage > Schedule.
- In the Scheduled Tasks window, set the Schedule malware detection toggle to Enabled and do the following:
- Click the Configure schedule link to set the necessary schedule and specify recurrence settings, and click Save.
- In the Restore points field, specify the number of restore points on each machine that you want to scan for malware.
By default, Orchestrator checks the most recent restore point. However, if you specify to scan more than 1 restore point, Orchestrator will perform scanning starting from the earliest available restore point to the most recent one. If all of the restore points are infected, the plan will acquire the NOT VERIFIED state after the scan process completes.
For more information on the way Orchestrator chooses restore points for malware scan, How Orchestrator Selects Restore Points During On-Demand Malware Scan.
- [Applies only to restore and cloud plans] Choose whether you want to scan the restore points created for machines included in the plan with antivirus software, a YARA rule or both.
- [Applies only if you have selected the Antivirus scan check box, YARA scan using rule file checkbox or both] By design, Orchestrator scans the restore point until a virus or YARA rule match is detected. Then, Orchestrator either completes the scanning session or proceeds to the next restore point in case you have specified multiple restore points in the Restore Points field. However, you can instruct Orchestrator to continue scanning until all possible malware is detected — to do that, select the Full image scan check box.
- To save changes made to the plan malware schedule, click Save.
As soon as you click Save, Orchestrator will create a new malware schedule. To track the status of the created schedule, navigate to the Scheduled tasks tab.
